Developer Portal AUTHENTICATION
Back to Dashboard

Developer Authentication

The breach.rip API uses a standard header-based authentication protocol. All requests must be authenticated using your unique API key found in your account dashboard. Never expose your API key in client-side code.

Request Header
Send your key via the x-api-key custom header.
x-api-key: YOUR_PRIVATE_KEY
Base URL
All endpoints are relative to the production base URL.
https://breach.rip/api/v1
Global cURL Example
Shell / cURL
# Test your connection and authentication
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: BR_LIVE_9283..." \
  -H "Content-Type: application/json" \
  -d '{"query": "admin@breach.rip", "type": "breaches"}'

Integration Guide

Learn how to seamlessly integrate breach.rip intelligence into your own security tools, web applications, or automated threat hunting pipelines.

Backend Implementation (Node.js)
Javascript / Node.js
const axios = require('axios');

async function lookupBreach(query) {
  const response = await axios.post('https://breach.rip/api/v1/search', {
    query: query,
    type: 'breaches'
  }, {
    headers: { 'x-api-key': process.env.BREACH_API_KEY }
  });

  return response.data.results;
}
Security Best Practices
  • Environment Variables: Always store your API key in secure environment variables (e.g., .env files).
  • Proxy Requests: Always call the breach.rip API from your backend server. Do not call it from the browser (Frontend) to avoid key theft.
  • Caching: Consider caching results for 24 hours to optimize credit usage for repeated queries.
  • Error Handling: Implement robust retry logic for rate limits (HTTP 429).

Billing & Rate Limits

Our API is designed for high-performance security operations. Credit deduction only occurs on successful data retrieval.

Credit Logic
Each successful lookup costs exactly 1 credit. Failed lookups or "No Results Found" queries cost 0 credits.
Rate Limits
Standard Limit: 20 Requests / Minute.
If exceeded, a 5-minute block is automatically applied.

Breaches Search

Query over 15 billion records from 3,000+ historical data breaches. This endpoint provides deep exposure analysis including emails, usernames, and associated metadata.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"target@example.com","type":"breaches"}'

Stealer Logs

Access intelligence from modern malware infections (RedLine, Raccoon, Vidar). This endpoint extracts compromised credentials, system info, and browser session data.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"target_username","type":"stealer"}'

Passwords

Query directly against our massive password dictionary and dehashed database.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"example@gmail.com","type":"passwords"}'

Domains

Perform reconnaissance on target domains to extract linked subdomains and infrastructure details.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"example.com","type":"domains"}'

Discord ID

Resolve Discord Snowflakes (IDs) to extract historical usernames, avatar hashes, and linked accounts.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"123456789012345678","type":"discord"}'

Roblox

Extract deep account information for Roblox users, including historical data.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"target_username","type":"roblox"}'

Telegram

Investigate Telegram usernames or IDs to find linked phone numbers or historical aliases.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"target_user","type":"telegram"}'

Socials

Determine which social media platforms an email is registered on. Includes 2FA status and masked phone number hints for account recovery analysis.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"target@email.com","type":"socials"}'

IP Geolocation

Retrieve highly accurate geolocation data, ISP info, and ASN details for any IPv4/IPv6 address.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"8.8.8.8","type":"ip"}'

Phone Lookup

Cross-reference international phone numbers against telecommunication breaches and public records.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"+1234567890","type":"phone"}'

Melissa Identity

Deep identity resolution via Melissa intelligence networks. Validates and enriches contact identifiers.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"target@example.com","type":"melissa"}'

IntelX System ID

Lookup hardware metadata and environment characteristics using an IntelX System ID.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"67283122-710f-477c-82dd-2edb8db140ed","type":"intelx"}'

Shodan Lookup

Host metadata, network signature retrieval, and passive recon against internet-facing infrastructure. Accessed via a simple GET request.

cURL Command
curl -X GET "https://breach.rip/api/v1/shodan?q=8.8.8.8" \
  -H "x-api-key: YOUR_KEY"

Cypher Dynamics

High-fidelity underground intel queries across specific categories: email, password, phone, username, ip, domain, asn.

cURL Command
curl -X GET "https://breach.rip/api/v1/cypher?q=target@email.com&category=email" \
  -H "x-api-key: YOUR_KEY"

Username Search

Comprehensive lookup for historical username data, aliases, and associated breaches across the underground web.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"johndoe","type":"username"}'

GitHub OSINT

Extract deep intelligence from GitHub profiles, including associated email addresses, organization memberships, and repository metadata.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"username","type":"github"}'

TikTok OSINT

Retrieve profile information, verified status, and linked identifiers from TikTok accounts.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"tiktok_user","type":"tiktok"}'

Reddit Search

Analyze Reddit user history, identifying interests, activity patterns, and linked social context.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"reddit_user","type":"reddit"}'

Combo Lookup

Search through known combo-lists (user:pass pairs) for a specific target.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"target_email","type":"combo"}'

Hash Lookup

Reverse-lookup password hashes or generate hash signatures for comparison across leaked databases.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8","type":"hash"}'

IP WHOIS

Extract deep WHOIS information, including ownership and registration details for any IPv4 or IPv6 address.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"8.8.8.8","type":"whois"}'

Binlist (CC)

Look up Bank Identification Numbers (BIN) to identify credit card issuing banks, card types, and brands.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"453978","type":"binlist"}'

VIN Decoder

Decode Vehicle Identification Numbers (VIN) to extract vehicle specifications, history, and manufacturing data.

cURL Command
curl -X POST "https://breach.rip/api/v1/search" \
  -H "x-api-key: YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query":"VIN_HERE","type":"vin"}'